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REMARKS 

Reconsideration of the application in view of the following remarks is 
respectfully requested. Claims 1, 3-22, 24-43, and 45-66 are currently pending in the 
application. 

CLAIMS 1, 3-16, 22, 24-37, 43, AND 45-58 
The Office Action rejected Claims 1,3-16, 22, 24-37, 43, and 45-58 under 35 

U.S.C. § 102(e) as being anticipated by Elgamal et al. (U.S. Patent No. 6,389,534 Bl). 

The rejection is traversed. 

With regard to Claim 1, there is recited a method performed by a framework in a 

system comprising the framework and at least one application; that method comprising: 

receiving a request from the application for a customized 
implementation of a service; 

determining a set of zero or more restrictions to be imposed upon 
said customized implementation; 

dynamically constructing said customized implementation, said 
customized implementation incorporating said restrictions, and comprising 
enforcement logic for enforcing said restrictions; and 

providing said customized implementation to the application; 

wherein said customized implementation is invocable by the 
application without further interaction with the framework. 

(emphasis added). 

As discussed in the response to the previous Office Action ("the previous 
response"), the method of Claim 1 is quite advantageous because it allows an application 
to obtain access to services without repeatedly requesting those services from some 
centralized framework. 

Also as discussed in the previous response, Elgamal does not disclose, teach, or 
suggest such a method. As discussed in the previous response, Elgamal fails to disclose, 



P4552NP (15437-01 12) 



2 



teach, or suggest the limitation of "wherein said customized implementation is invocable 
by the application without further interaction with the framework." 

The Final Office Action alleges that "Elgamal's Fig. 3 and further elaboration on 
column 6, lines 11-31 shows that the application does not have to return to the framework 
every time it needs to request an allowed operation or service." The Final Office Action 
further alleges, "A filtered list is returned to the application (column 6, lines 26-29) and 
hence, the application does not need to go back and call the framework to repeat this 
process whenever it needs to request an operation regarding a cryptographic function 
within the uploaded filtered list." 

However, even assuming, arguendo, that a filtered list is returned to the 
application of Elgamal, it does not necessarily follow from this assertion that the 
application does not need to go back and call the framework whenever the application 
needs to request an operation regarding a cryptographic function within the uploaded 
filtered list. Quite to the contrary, the very last sentence of the text cited by the Final 
Office Action reads, "With the list of filtered (or authorized) cipher suites, the application 
causes a cryptographic operation to be performed in accordance with FIG. 4." (Col. 6, 
lines 29-31; emphasis added). 

Thus, to understand how the application of Elgamal causes a cryptographic 

operation to be performed, reference must be made to Elgamal's FIG. 4 and the 

accompanying description. In col. 6, lines 32-43, Elgamal states: 

Referring now to FIG. 4, the cryptographic operation is initiated by an 
application at step 401. The application calls a service module to 
request an operation involving cryptographic functions at step 402. 
At step 403, the service module calls its corresponding policy filter to 
determine whether the called operation is allowed. At step 404, if the 
called operation is not approved by the corresponding policy filter, 
then the service module returns an error to the application at step 405. 
On the other hand, if, at step 404, the called operation is approved, then 
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at step 406, the service module perforins the called operation, calling 
the cryptographic module as necessary. Thereafter, the service module, 
at step 407, returns the operation results to the application. 

(emphasis added). 

Contrary to the Final Office Action's assertions, the above text makes it clear that 
even though a filtered list might be returned to the application of Elgamal, the application 
of Elgamal actually does need to go back and call the alleged framework whenever the 
application needs to request an operation regarding a cryptographic function. From the 
Final Office Action, it appears that the "service module" of Elgamal is being analogized 
with the "framework" of Claim 1. That being the casae, the above text indicates that, 
even with the list of filtered cipher suites, the application of Elgamal always calls the 
service module whenever the application requests an operation involving cryptographic 
functions. 

Thus, according to the Final Office Action's analogy and the above text, the 
application of Elgamal always calls the alleged framework (i.e., service module) 
whenever the application requests an operation involving cryptographic functions, 
thereby further interacting with the alleged framework. Therefore, Elgamal does not 
disclose, teach, or suggest the limitation of "wherein said customized implementation is 
invocable by the application without further interaction with the framework" as 
required by Claim 1 . 

Additionally, the above text makes it clear that the service module of Elgamal 
returns either an "error" or "operation results" to the application of Elgamal. As 
explained in the previous response, neither an "error" nor "operation results" is the same 
as a "customized implementation of a service" as required by Claim 1 . Unlike the 
customized implementation of Claim 1, which is "invocable by the application without 
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further interaction with the framework," neither an "error" nor "operation results" can 
even be invoked. 

For at least these reasons, Applicants submit that Elgamal does not anticipate 
Claim 1. 

Claim 22 is a device claim analogous to the method of Claim 1. Claim 43 is a 
computer-readable medium claim analogous to the method of Claim 1. Applicants 
submit that, for at least the reasons given above in connection with Claim 1, Elgamal 
does not anticipate Claims 22 and 43. 

CLAIMS 17-21, 38-42, AND 59-63 

The Office Action rejected Claims 17-21, 38-42, and 59-63 under 35 U.S.C. 
§ 103(a) as being unpatentable over Elgamal in view of Schell et al. (U.S. Patent No. 
5,933,503). The rejection is respectfully traversed. 

Claims 17, 38, and 59 depend from Claims 1, 22, and 43, respectively. Therefore, 
Claims 17, 38, and 59 contain the limitations of Claims 1, 22, and 43, respectfully. 

As explained above, Elgamal does not disclose, teach, or suggest the limitation 
"wherein said customized implementation is invocable by the application without further 
interaction with the framework." Thus, Claims 17, 38, and 59 are patentable over 
Elgamal, taken individually. 

Schell also fails to disclose, teach, or suggest the limitation "wherein said 
customized implementation is invocable by the application without further interaction 
with the framework." Indeed, the Office Action relies only upon Elgamal to disclose this 
limitation. The Office Action does not even allege that Schell discloses or suggests this 
limitation. Thus, Claims 17, 38, and 59 are patentable over Schell, taken individually. 
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Even assuming, arguendo, that it would have been obvious to combine Elgamal 
and Schell, the combination of Elgamal and Schell still fails to disclose, teach, or suggest 
the limitation "wherein said customized implementation is invocable by the application 
without further interaction with the framework" as contained in Claims 17, 38, and 59. 
Accordingly, Applicants submit that Claims 17, 38, and 59 are patentable over Elgamal 
and Schell. 

CLAIMS 64-66 

The Office Action rejected Claims 64-66 under 35 U.S.C §103(a) as being 
unpatentable over Elgamal in view of Chan et al. (U.S. Patent No. 6,005,942). The 
rejection is respectfully traversed. 

Claims 64, 65, and 66 depend from Claims 1, 22, and 43, respectively. Therefore, 
Claims 64, 65, and 66 contain the limitations of Claims 1, 22, and 43, respectfully. 

As explained above, Elgamal does not disclose, teach, or suggest the limitation 
"wherein said customized implementation is invocable by the application without further 
interaction with the framework." Thus, Claims 64-66 are patentable over Elgamal, taken 
individually. 

Chan also fails to disclose, teach, or suggest the limitation "wherein said 
customized implementation is invocable by the application without further interaction 
with the framework." Indeed, the Office Action relies only upon Elgamal to disclose this 
limitation. The Office Action does not even allege that Chan discloses or suggests this 
limitation. Thus, Claims 64-66 are patentable over Chan, taken individually. 

Even assuming, arguendo, that it would have been obvious to combine Elgamal 
and Chan, the combination of Elgamal and Chan still fails to disclose, teach, or suggest 
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the limitation "wherein said customized implementation is invocable by the application 
without further interaction with the framework" as contained in Claims 64-66. 
Accordingly, Applicants submit that Claims 64-66 are patentable over Elgamal and Chan. 

Additionally, the portion of Chan cited in the Final Office Action refers to the 
"JAVA Card standard," rather than the "Java Cryptography Extension to Java Platform" 
recited in Claims 64-66. The "JAVA Card standard" is not the same as the "Java 
Cryptography Extension to Java Platform" recited in Claims 64-66. Thus, Claims 64-66 
are patentable over Chan, taken individually. 

The Final Office Action admits that Elgamal does not disclose, teach, or suggest a 
framework that comprises the Java Cryptography Extension to Java Platform as required 
by Claims 64-66. Thus, Claims 64-66 are also patentable over Elgamal, taken 
individually. 

Even assuming, arguendo, that it would have been obvious to combine Elgamal 
and Chan, the combination of Elgamal and Chan still fails to disclose, teach, or suggest a 
framework that comprises the Java Cryptography Extension to Java Platform as required 
by Claims 64-66. Accordingly, Applicants submit that Claims 64-66 are patentable over 
Elgamal and Chan. 

REMAINING DEPENDENT CLAIMS 
The pending claims not discussed so far are dependent claims that depend on an 
independent claim that is discussed above. Because each of the dependent claims 
includes the limitations of claims upon which they depend, the dependent claims are 
patentable for at least those reasons the claims upon which the dependent claims depend 
are patentable. Removal of the rejections with respect to the dependent claims and 
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•^o^^gMlowance of the dependent claims is respectfully requested. In addition, the dependent 

claims introduce additional limitations that independently render them patentable. Due to 
the fundamental difference already identified, a separate discussion of those limitations is 
not included at this time. 

For at least the reasons set forth above, Applicants respectfully submit that all 
pending claims are patentable over the art of record, including the art cited but not 
applied. Accordingly, allowance of all claims is hereby respectfully solicited. 



Dated: May 1"7 ,2004 
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